Deployment Architecture

Can index storage be used as Google cloud storage?

jypark0
Engager

Hi, splunk.

I am going to use the index storage space as Google cloud storage.

I installed Splunk and mounted the Google Cloud Storage FUSE on the index storage.

I had no problem creating the index by setting it to that path, but it does not start when you restart your Splunk.

I think the problem is in permissions while using Google Cloud Storage FUSE.

I don't know how to solve this problem.

0 Karma

beatus
Communicator

If the filesystem used is supported, it should work in theory. See here: http://docs.splunk.com/Documentation/Splunk/6.5.1/Installation/Systemrequirements#Supported_file_sys...

I suspect that it isn't a supported filesystem, which will cause Splunk to run something called "locktest" on it. If Splunk is unable to acquire a lock then it will not allow you to utilize the storage. See here: https://docs.splunk.com/Documentation/Splunk/6.5.1/Troubleshooting/CommandlinetoolsforusewithSupport...

Lastly, I don't know much about Google Cloud Storage FUSE, but i suspect performance may be an issue. I'd use caution even if it does work correctly. Based on what i'm reading here: https://github.com/GoogleCloudPlatform/gcsfuse#latency-and-rsync I'd be concerned with performance characteristics.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...